Emerging ThreatsMalware & Ransomware

Google Patches Actively Exploited Chrome Zero-Day in 2026 Security Update

Analyst 207||Source: TheHackerNews
Person sitting at laptop with blurred screen, face obscured, amidst blurred cityscape, conveying vulnerability.

CVE-2026-125350 — described by Google as a use-after-free bug in the browser’s XML component — is the newest actively exploited zero-day the company has patched, the firm said on Monday.

CVE-2026-125350: the flaw and the immediate risk

Google classified CVE-2026-125350 as a high-severity use-after-free vulnerability in Chrome’s XML component. The company noted that successful exploitation of use-after-free bugs “could allow an attacker to achieve data corruption, program crashes, or arbitrary code execution.” The vulnerability’s CVSS score was listed as N/A in Google’s advisory.

Use-after-free flaws occur when a program attempts to access memory that has already been freed; in the context of a web browser, that kind of memory misuse can be used to escape containment and run code on a user’s machine. Google explicitly acknowledged it is “aware that an exploit for CVE-2026-125350 exists in the wild,” but provided no additional operational details about who is using the exploit or the specific attack vectors observed.

Discovery, disclosure and Google’s handling of details

An anonymous security researcher is credited with reporting the bug to Google on November 6, 2026. In its public note, Google said it may keep “Access to bug details and links … restricted until a majority of users are updated with a fix.” The company added, “We will also retain restrictions if the bug exists in a third-party library that other projects similarly depend on, but haven't yet fixed.”

That approach — delaying full disclosure while patches roll out — is the posture Google stated it is taking for this and some other recent Chrome fixes.

Which Chrome builds to install now

Google released patched Chrome builds and urged immediate updates. The fixed versions are:

  • Windows and Apple macOS: 157.0.8103.50 / 157.0.8103.51
  • Linux: 157.0.8103.50

To update, users can navigate in the browser to More > Help > About Google Chrome and select Relaunch to ensure the latest changes take effect. Google also advised that users of other Chromium-based browsers — explicitly naming Microsoft Edge, Brave, Opera, and Vivaldi — should apply equivalent fixes “as and when they become available.”

Eight actively exploited Chrome zero-days in 2026

With CVE-2026-125350 now patched, Google has addressed a total of eight Chrome zero-days that it says were actively exploited since the start of 2026. The company listed the prior vulnerabilities by CVE identifier: CVE-2026-2441, CVE-2026-3909, CVE-2026-3910, CVE-2026-5281, CVE-2026-11645, CVE-2026-85046, and CVE-2026-87491.

Google’s advisory does not tie those earlier vulnerabilities to specific exploitation campaigns in this notice; it does, however, treat this most recent bug as part of the same pattern of actively exploited issues requiring timely patching.

What this means for security teams, enterprises, and end users

  • Technologists and security teams: prioritize deploying Chrome 157.0.8103.50/.51 across managed fleets and monitor update status. Note Google’s warning that it may keep technical details restricted until a majority of users are patched and that a vulnerability in a third-party library could delay broader disclosure.
  • Affected enterprises and procurement leaders: coordinate with vendors of Chromium-based products — Microsoft Edge, Brave, Opera, Vivaldi — to confirm when equivalent vendor patches will be released and to schedule rollouts in tandem with Chrome patches.
  • End users and the general public: install the Chrome update via More > Help > About Google Chrome and Relaunch, and apply updates to other browsers as vendor fixes become available to reduce exposure to an exploit Google says exists in the wild.

The immediate takeaway is procedural: patch now, and be mindful that Google may withhold exploit details until many users are protected or until third-party libraries have been updated. The broader fact left on the table is simple and consequential — this is the eighth Chrome zero-day Google has publicly addressed this year — and it underscores why timely updates remain a central line of defense.

Original reporting: https://thehackernews.com/2026/11/google-issues-chrome-security-update.html

Browser SecurityChromeEmerging ThreatsGoogleZero-DayHigh-Severity VulnerabilityUse-After-Free VulnerabilityCVE-2026-125350
Related Intelligence

Continue Reading

Empty server room with rows of server racks and equipment near tall windows.

N-able Disrupts Cloud Service Amid Zero-Day Vulnerability Disclosures

N-able is taking a swift and cautious approach to protect its customers by temporarily taking its Hosted N-central environment offline and advising on-premises customers to shut down their servers amid a critical zero-day vulnerability disclosure. This proactive measure will ensure the environment is secured and proper fixes are implemented before services are brought back online.

Analyst 207
Rows of servers in a brightly-lit data center with a single workstation in the foreground.

Fireworks AI Breach Exposes Customer Data After Cloud Provider Hack

A recent hack of a cloud provider has led to a data breach at Fireworks AI, exposing sensitive customer information, and highlighting the growing threat of financially motivated cybercriminals targeting AI infrastructure. The breach appears to be linked to a group aiming to profit from unauthorized access to Large Language Models.

Analyst 207
Security analysts work at computer workstations with multiple screens in a modern operations room.

CISA Flags Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, IBM Flaws

The alarm bells are ringing: CISA has flagged four high-severity vulnerabilities, including OpenSSH and FreeSWITCH, for active exploitation, with one OpenSSH flaw already linked to 22 recorded exploitation attempts. These critical flaws have earned high CVSS scores and patches are available to prevent further damage.

Analyst 207
Laptop sits on desk in Vanderbilt University library, screen blank, surrounded by blurred students and study materials.

Vanderbilt University Hit by BYOD Ransomware Gang in Data Theft Attack

Vanderbilt University is battling a cybersecurity crisis after a ransomware gang launched a data theft attack, prompting the university to shut down devices and disconnect from Wi-Fi. The university's IT team is racing to contain the situation and protect sensitive data.

Analyst 207